Go to file

4Ventures 2df3fe6983 fix(security): harden auth, tenant scoping, and scrub secrets

Require session on APIs, scope KPIs/activos/simulate to the user tenant, strip real JWTs from .env.example, and add health/smoke/docs for 4Ventures ops.

Co-authored-by: Cursor <cursoragent@cursor.com>

2026-09-21 10:51:46 +02:00

docs

fix(security): harden auth, tenant scoping, and scrub secrets

2026-09-21 10:51:46 +02:00

public

feat(branding): set official 4ventures.es favicon on app.4ventures.es

2026-09-21 02:32:04 +02:00

scripts

fix(security): harden auth, tenant scoping, and scrub secrets

2026-09-21 10:51:46 +02:00

sql

fix(security): harden auth, tenant scoping, and scrub secrets

2026-09-21 10:51:46 +02:00

src

fix(security): harden auth, tenant scoping, and scrub secrets

2026-09-21 10:51:46 +02:00

.dockerignore

feat: initial Next.js 15 client portal scaffold with Supabase & shadcn

2026-09-21 00:44:41 +02:00

.env.example

fix(security): harden auth, tenant scoping, and scrub secrets

2026-09-21 10:51:46 +02:00

.gitignore

fix(security): harden auth, tenant scoping, and scrub secrets

2026-09-21 10:51:46 +02:00

Dockerfile

fix(portal): ensure public directory exists for docker runner stage

2026-09-21 00:49:07 +02:00

next.config.js

fix(security): harden auth, tenant scoping, and scrub secrets

2026-09-21 10:51:46 +02:00

package.json

fix: add autoprefixer to devDependencies

2026-09-21 00:46:30 +02:00

postcss.config.js

feat: initial Next.js 15 client portal scaffold with Supabase & shadcn

2026-09-21 00:44:41 +02:00

README.md

fix(security): harden auth, tenant scoping, and scrub secrets

2026-09-21 10:51:46 +02:00

SECURITY.md

fix(security): harden auth, tenant scoping, and scrub secrets

2026-09-21 10:51:46 +02:00

tailwind.config.ts

feat: initial Next.js 15 client portal scaffold with Supabase & shadcn

2026-09-21 00:44:41 +02:00

tsconfig.json

feat: initial Next.js 15 client portal scaffold with Supabase & shadcn

2026-09-21 00:44:41 +02:00

README.md

4Ventures — Centro de Mando del Cliente

Portal ejecutivo multi-tenant · source of truth para app.4ventures.es.

Operador: marketing@4ventures.es

Next.js 15 + Supabase + n8n (agentes/webhooks fuera de este repo).

Quick start

cp .env.example .env.local   # keys rotadas — nunca las del PDF histórico
npm install
npm run dev

Health: GET /api/health

Docs

Rutas

Path	Uso
`/login`	Supabase Auth
`/dashboard/kpis`	KPIs
`/dashboard/estrategia`	Targets + simulador
`/dashboard/activos`	Docs aprobados (RLS)
`/dashboard/creatives`	Creatividades (en curso)
`/dashboard/asistente`	Chat RPC
`/dashboard/agencia`	Cross-tenant (admin/team)
`/dashboard/calendario`	Editorial RRSS
`/_4v_attr.js`	Script atribución